Director Enterprise Applications

Position Summary

The Director of Enterprise Applications provides strategic and operational leadership for a diverse portfolio of departmental, operational, administrative, research, and supporting applications across Stony Brook Medicine. Reporting to the Assistant Vice President of Enterprise Applications, the Director is accountable for the reliable, secure, cost-effective, and sustainable delivery of assigned application services throughout their lifecycle.

This portfolio is distinct from the electronic medical record and other core enterprise application portfolios, including Revenue Cycle, Enterprise Imaging and Ancillary Systems, and Integration Services. It primarily includes vendor-supported and internally supported solutions that enable important functions across the health system but require a right-sized, disciplined model for ownership, support, governance, and investment.

The Director leads application support, implementation, optimization, modernization, rationalization, and retirement activities. The role establishes clear ownership and service expectations; strengthens operational resilience; reduces technical, security, and vendor risk; and ensures that technology decisions align with business needs, regulatory obligations, architectural direction, and enterprise standards.

The Director serves as a trusted partner to operational and administrative leaders and works closely with cybersecurity, infrastructure, architecture, integration, compliance, privacy, procurement, finance, project management, and vendors. The position translates organizational needs into practical solutions while balancing customer value, supportability, risk, cost, and long-term sustainability.

Duties of a Director of Enterprise Applications may include the following but are not limited to:

Application Portfolio Strategy and Governance

• Develop and maintain a portfolio strategy and multiyear roadmaps aligned with organizational priorities and enterprise technology direction.
• Establish and enforce standards for application intake, ownership, classification, support, lifecycle management, documentation, and retirement.
• Evaluate requests for new or expanded applications based on business value, strategic fit, security, integration, total cost, resourcing, supportability, and long-term sustainability.
• Lead application rationalization efforts to identify opportunities to standardize, consolidate, replace, modernize, or retire duplicative, aging, unsupported, or high-risk solutions.
• Provide clear portfolio reporting and recommendations to support governance, prioritization, resource allocation, and investment decisions.

Operations and Service Delivery

• Oversee day-to-day support, availability, performance, maintenance, monitoring, and service restoration for assigned applications.
• Define service expectations, operational metrics, escalation paths, and vendor performance measures appropriate to application criticality.
• Lead response to major incidents and recurring service issues, including stakeholder communication, root-cause analysis, corrective actions, and follow-through.
• Ensure disciplined change, release, testing, validation, documentation, access, and production support practices.
• Develop resilient support models through cross-training, knowledge management, succession planning, and reduced dependency on individual staff members or vendors.

Lifecycle Management and Modernization

• Direct application selection, implementation, enhancement, integration, upgrade, migration, and retirement activities.
• Maintain lifecycle plans that address vendor support, technical currency, cybersecurity, privacy, regulatory requirements, interoperability, continuity, and technical debt.
• Partner with architecture, infrastructure, cybersecurity, and integration teams to ensure solutions follow enterprise standards and are designed for secure and reliable operation.
• Advance appropriate use of cloud-hosted and software-as-a-service solutions, automation, platform capabilities, and emerging technologies where they improve value, resilience, or supportability.
• Ensure transitions into production include complete operational documentation, ownership, training, monitoring, support, and recovery requirements.

Program and Project Execution

• Translate approved organizational priorities into clear plans, deliverables, resource needs, dependencies, and success measures.
• Provide leadership for implementations and optimization initiatives within approved scope, budget, schedule, quality, and risk parameters.
• Coordinate operational, clinical, technical, vendor, and project resources across organizational boundaries.
• Identify risks and constraints early and implement appropriate mitigation, decision, and escalation strategies.
• Ensure completed solutions are adopted, measured, documented, and transitioned effectively to ongoing operations.

Vendor, Contract, and Financial Stewardship

• Manage strategic vendor relationships and hold vendors accountable for service quality, responsiveness, deliverables, contractual commitments, and issue resolution.
• Partner with procurement, legal, finance, cybersecurity, privacy, and business owners on contracts, renewals, licensing, due diligence, and vendor reviews.
• Monitor application costs, licensing, consumption, support arrangements, and contract performance to promote responsible stewardship.
• Contribute to operating and capital budget planning, forecasting, business cases, and investment recommendations.
• Pursue cost optimization through consolidation, license management, standardization, contract alignment, and retirement of low-value or duplicative solutions.

Risk, Compliance, and Business Continuity

• Ensure assigned applications comply with organizational policies, cybersecurity and privacy requirements, regulatory obligations, audit expectations, and records requirements.
• Maintain appropriate controls, inventories, system documentation, risk records, recovery plans, support records, and evidence of testing.
• Partner with cybersecurity, privacy, compliance, legal, and risk leaders to identify, communicate, prioritize, and remediate application risks.
• Ensure business continuity and disaster recovery requirements are defined, tested, and aligned with application criticality and operational needs.
• Communicate material risks, exceptions, service concerns, and recommended actions to leadership and accountable business owners.

Leadership and Workforce Development

• Lead, coach, and develop application managers, analysts, engineers, and other technical staff supporting the portfolio.
• Establish clear priorities, performance expectations, decision rights, and accountability for results.
• Assess organizational, staffing, sourcing, and technical capability needs and develop plans to close gaps.
• Build a collaborative, customer-focused culture that values ownership, transparency, knowledge sharing, continuous improvement, and strong service delivery.
• Promote professional development, cross-training, succession planning, and an inclusive environment aligned with organizational values.

Stakeholder Partnership and Communication